Prisma Cloud by Palo Alto Networks vs Trellix Cloud Workload Security comparison

The compared Palo Alto Networks and Trellix solutions aren't in the same category. Palo Alto Networks is ranked #2 in CNAP , with an average rating of 8.5, and holds a 11.0% mindshare in the category. Trellix is ranked #28 in CWPP , and holds a 0.6% mindshare. Additionally, 98% of Palo Alto Networks users are willing to recommend the solution, compared to 100% of Trellix users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 11, 2026

Prisma Cloud by Palo Alto Networks and Trellix Cloud Workload Security compete in cloud security. Prisma Cloud is favorable for enterprises with diverse integration needs, while Trellix offers superior threat protection for advanced security requirements.

Features: Prisma Cloud provides comprehensive visibility, multi-cloud support, and robust governance across platforms, making it suitable for organizations with varied environments. Trellix Cloud Workload Security stands out with advanced threat detection, real-time risk analytics, and effective threat mitigation capabilities.

Ease of Deployment and Customer Service: Prisma Cloud is recognized for a straightforward setup and responsive customer support, enabling seamless integration. Trellix Cloud Workload Security, although more complex in deployment, is noted for providing in-depth technical assistance.

Pricing and ROI: Prisma Cloud offers a competitive pricing structure with strong ROI due to its extensive features and operational efficiency. Trellix Cloud Workload Security has a higher initial setup cost but provides substantial ROI through enhanced risk reduction.

To learn more, read our detailed Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security Report (Updated: March 2025).

Buyer's Guide

Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security

March 2025

Download the complete report

Helped 895,399 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
Product	Mindshare (%)
Prisma Cloud by Palo Alto Networks	11.0%
Wiz	13.8%
Microsoft Defender for Cloud	8.1%
Other	67.1%

Cloud-Native Application Protection Platforms (CNAPP)

Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
Product	Mindshare (%)
Trellix Cloud Workload Security	0.6%
Microsoft Defender for Cloud	14.0%
AWS GuardDuty	11.3%
Other	74.1%

Cloud Workload Protection Platforms (CWPP)

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

reviewer2776578

Cyber Security Architect at a comms service provider with 10,001+ employees

Image scanning has supported consistent security practices during cloud deployment

On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Read full review

Manish Kumar Twinkle

Security Engineer at itsipl

Granular protection has improved cloud workload visibility and reduced breach and ransomware risk

Trellix Cloud Workload Security is important in our organization because it reduces our risk of data breaches, protects from ransomware, and addresses the misconfiguration of cloud resources such as AWS and Azure. If any lateral movement has occurred in our infrastructure, it provides me with an alert, along with notifications of any container misconfiguration. We also receive continuous visibility of servers and compliance assurance for our vulnerability protection, ensuring that if something is not patched or vulnerable, the vulnerabilities are fixed. The best feature of Trellix Cloud Workload Security is the granular level implementation and configuration of ransomware protection, which includes a threat prevention module and vulnerability protection, allowing us to protect our servers with the help of container security. When discussing the granular level implementation in Trellix Cloud Workload Security, it means that when we configure the policies for threat prevention, we can define many aspects such as the type of file, kernel level, boot level, execution read-write time, memory-specific, and application-specific parameters. We can configure it properly based on our knowledge and also define the schedule for anti-malware scanning and updates. Trellix Cloud Workload Security has positively impacted our organization by improving our visibility across cloud and infrastructure, showing how many workloads we have and what is occurring with those workloads. It enhances protection against threat monitoring through real-time alerts and addresses misconfiguration and vulnerabilities on workloads and running applications. Additionally, it ensures compliance with organizational and industry securities, facilitating faster incident detection and response, which helps our IT and security team proactively remediate risks before major incidents occur. When discussing faster incident detection and response with Trellix Cloud Workload Security, if any alert comes through, such as a vulnerability detected on a server, expanding the alert provides us with MITRE framework tactics and techniques, including necessary remediations for updates or modifications.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."

"I would rate Qualys TotalCloud ten out of ten."

"Qualys TotalCloud fulfills all these needs."

"The best part I like is the on-demand scans."

"The most valuable feature is the consolidated information that it provides from various platforms."

"Qualys TotalCloud has improved our security posture."

"TotalCloud provides the easiest and the best approach for cloud infrastructure management."

"I would definitely recommend it because it is easy to handle any cloud resources."

More Qualys TotalCloud pros

"It gives us a central location to see what the security posture is like for multiple cloud providers."

"The CVEs are valuable because we used to have a tool to scan CVEs, at the language level, for the dependencies that our developers had. What is good about Prisma Cloud is that the CVEs are not only from the software layer, but from all layers: the language, the base image, and you also have CVEs from the host. It covers the full base of security."

"In the GlobalProtect module, we can easily guide users experiencing connection issues through the notification column."

"The first aspect that is important is the fact that Prisma Cloud is cloud-agnostic. It's actually available for the five top cloud providers: AWS, GCP, Azure, Oracle, and Alibaba Cloud. The second aspect is the fact that we can write our own rules to try to detect misconfigurations in those environments."

"This solution provides us with a single tool to protect all of our cloud resources and applications without having to manage and reconcile different security and compliance reports."

"CSPM is the most valuable feature."

"Prisma Cloud's most valuable feature is its user identification capabilities."

"The most valuable feature is the option to add custom queries using the RQL language that they supply so that we can customize the compliance frameworks to what we need to look for."

More Prisma Cloud by Palo Alto Networks pros

"From my personal experience as a reseller, what really stands out in Trellix Cloud Workload Security is that it provides focused security with enhanced protection for servers in a cloud environment."

"All these things are beautifully done by McAfee Cloud Workload Security."

"Trellix Cloud Workload Security has positively impacted our organization by improving our visibility across cloud and infrastructure, showing how many workloads we have and what is occurring with those workloads."

"The most valuable feature is the application control."

"The discovery feature is the most valuable. After you integrate your cloud environment, maybe an Azure or AWS, or a private environment hosted on VMware, it automatically starts discovering the number of servers that are running on that cloud and the number of services that you have done. It is a beautiful feature because, from a security standpoint, it is difficult to identify which VM is compliant or not when you keep on provisioning a number of VMs in the cloud. It also checks for compliance. It checks whether a system is compliant and whether antivirus is installed on a VM. If an antivirus is installed, it checks whether the antivirus is updated to the latest signature package or not. All these things are beautifully done by McAfee Cloud Workload Security. For communicating with the McAfee server, you need to install an agent on the VM. McAfee Cloud Workload Security gives you a direct opportunity to install an agent on a Windows machine. If you have a Windows cloud, you can directly push that agent onto the VM through your McAfee portal. It provides you a single dashboard view of all servers present in the cloud. It shows the servers on which the antivirus is already installed as well as the servers for which the antivirus installation is still pending. This dashboard view is a much-needed thing. It also has a centralized management, which makes it easy to use."

Cons

"We would like to see Windows-based sensors available in Qualys, as this would make the platform more versatile and support a broader range of environments."

"Qualys TotalCloud needs to improve its accuracy for non-Windows operating systems."

"There is a lack of data segregation according to criticality or inventory."

"Qualys TotalCloud has the potential to improve by integrating a hybrid platform for comprehensive management of both on-premises and cloud infrastructures."

"In TotalCloud, I would suggest improvements in policy checks to cater to various inventory types like VPCs, subnets, S3 buckets, or IAMs. There is a lack of data segregation according to criticality or inventory."

"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."

"The cost of Qualys TotalCloud is high and could be more competitive."

"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."

More Qualys TotalCloud cons

"The data security model needs improvement due to integration issues with certain features and cloud providers. With Palo Alto now utilizing a tool from an Israeli startup in Prisma Cloud, the integration is slow, and some features are blocked or not supported."

"They are missing some compatibility details in their documentation."

"Prisma Cloud supports generating CSV files, but I would also like it to generate PDF files for reporting."

"The UI could be improved."

"We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view."

"The security automation capabilities are average."

"In terms of securing cloud-native development at build time, a lot of improvement is needed. Currently, it's more a runtime solution than a build-time solution. For runtime, I would rate it at seven out of 10, but for build-time there is a lot of work to be done."

"This solution is more AWS and Azure-centric. It needs to be more specific on the GCP side, which they are working on."

More Prisma Cloud by Palo Alto Networks cons

"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security. I wish McAfee would add a vulnerability assessment tool that will not only identify the vulnerability but will also be able to generate a report so that the required patching can be done for the servers. Currently, McAfee Cloud Workload Security only integrates with AWS and Azure. If it can also integrate with GCP, Alibaba, and other cloud services available in the market, it would be good because not all people are using Azure and AWS."

"There is room for improvement in the pricing model."

"We experience limited customer support, typically requiring a minimum wait of three to four hours for ticket responses."

"I still believe the support could improve because we face multiple challenges with Trellix support for solving issues, which take too long."

"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security."

Pricing and Cost Advice

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"Qualys TotalCloud is expensive, but it offers a premier solution with no headaches."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"The cost is high, but it meets our organizational needs."

"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."

"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."

"TotalCloud's price is about right where I would expect it to be."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

More Qualys TotalCloud pricing and cost advice

"Prisma Cloud licensing works on credits."

"One thing we're very pleased about is how the licensing model for Prisma is based on work resources. You buy a certain amount of work resources and then, as they enable new capabilities within Prisma, it just takes those work resource units and applies them to new features. This enables us to test and use the new features without having to go back and ask for and procure a whole new product, which could require going through weeks, and maybe months, of a procurement process."

"I don't know a better way to do it, but their licensing is a little confusing. That's due to the breadth of different types of technologies they are trying to cover. The way you license depends on where you're securing. When they were Twistlock it was a simple licensing scheme and you could tell what you were doing. Now that they've changed that scheme with Palo Alto, it is quite confusing. It's very difficult to predict what your costs are going to be as you try to expand coverage."

"Prisma Cloud is a value-back cloud-managed solution; cloud-native solutions are quite expensive."

"It is fairly priced. However, its price can be better so that small banks or small organizations can afford it and adopt it to secure their environment and data."

"Its price is reasonable as compared to other products. The main challenge is explaining the licensing model to customers. It isn't a problem related to Palo Alto. Commonly, people don't understand cloud licensing or security licensing. When they have fixed virtual machines, they know what they are going to be charged, but when it comes to cloud automation, it is hard for them to get clarity in case of high workloads or when they have enabled auto-scaling, etc. It would be helpful if Palo Alto can educate people on their licensing programs."

"Our licensing fees are $18,000 USD per year."

"Prisma Cloud Enterprise is a costly solution. You need a license for all the components. At the same time, you have everything under one roof, so I think it's still justified."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

"It is not an expensive product. I am in the Indian market, and it is one of the most reliable and cost-effective solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

895,399 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

10%

Manufacturing Company

Government

Financial Services Firm

15%

Computer Software Company

Manufacturing Company

Government

Comms Service Provider

16%

Government

13%

Construction Company

10%

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	3
Large Enterprise	28

By reviewers
Company Size	Count
Small Business	38
Midsize Enterprise	20
Large Enterprise	57

No data available

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

See all answers

What needs improvement with Qualys TotalCloud?

Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...

See all answers

What is your primary use case for Qualys TotalCloud?

Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...

See all answers

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

See all answers

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

See all answers

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

See all answers

Ask a question

Earn 20 points

Comparisons

Wiz vs Qualys TotalCloud

Compared 14% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 8% of the time

Nucleus Security vs Qualys TotalCloud

Compared 5% of the time

JupiterOne vs Qualys TotalCloud

Compared 4% of the time

AWS Security Hub vs Qualys TotalCloud

Compared 4% of the time

More Qualys TotalCloud Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 9% of the time

Check Point CloudGuard CNAPP vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

Cyera vs Prisma Cloud by Palo Alto Networks

Compared 6% of the time

SentinelOne Singularity Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 4% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 4% of the time

More Prisma Cloud by Palo Alto Networks Competitors

TrendAI Vision One – Cloud Security vs Trellix Cloud Workload Security

Compared 28% of the time

Microsoft Defender for Cloud vs Trellix Cloud Workload Security

Compared 25% of the time

AWS GuardDuty vs Trellix Cloud Workload Security

Compared 13% of the time

FortiCNAPP vs Trellix Cloud Workload Security

Compared 12% of the time

Aqua Cloud Security Platform vs Trellix Cloud Workload Security

Compared 9% of the time

More Trellix Cloud Workload Security Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

May 2026

Download Qualys TotalCloud product report

Buyer's Guide

Prisma Cloud by Palo Alto Networks

May 2026

Prisma Cloud by Palo Alto Networks report

Download Prisma Cloud by Palo Alto Networks product report

Buyer's Guide

Cloud Workload Protection Platforms (CWPP)

May 2026

Download Trellix Cloud Workload Security product report

Also Known As

Qualys TotalCloud with FlexScan

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

McAfee Cloud Workload Security

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

Trellix Cloud Workload Security offers an advanced scalable and adaptable platform designed to secure cloud environments. It addresses cybersecurity challenges while providing seamless integration and robust protection for cloud-based applications and infrastructure.

Designed for organizations requiring efficient cloud security, Trellix Cloud Workload Security integrates advanced threat detection and protection mechanisms to ensure continuous monitoring and instant threat responses. It leverages cutting-edge technology to safeguard data integrity and maintain operational efficiency, offering a seamless experience that aligns with contemporary cloud security requirements.

What are the key features?

Continuous Threat Monitoring: Delivers real-time alerts and enhances threat detection capabilities.
Scalable Architecture: Easily adapts to changes, meeting diverse business demands.
Compliance Assurance: Aligns with industry standards to mitigate compliance risks.
Seamless Integration: Smoothly aligns with cloud services to enhance security measures.

What benefits and ROI should users consider?

Enhanced Security: Ensures peace of mind with comprehensive threat protection.
Operational Efficiency: Optimizes resources, reducing overhead costs.
Improved Compliance: Reduces the risk of regulatory penalties.
Scalability: Allows businesses to grow securely without compromising performance.

In industries like financial services and healthcare, Trellix Cloud Workload Security is implemented to protect sensitive data and manage compliance requirements effectively. Its flexible architecture and robust security features allow it to adapt to these industries' demanding environments, offering reliable protection and integration while supporting specific industry regulations.

Trellix

Sample Customers

Information Not Available

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Information Not Available

Buyer's Guide

Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security

March 2025

Free Report: Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security

Find out what your peers are saying about Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security and other solutions. Updated: March 2025.

DOWNLOAD NOW

895,399 professionals have used our research since 2012.

See our Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security report.

We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.